JAVAX TO JAKARTA TALES FROM THE 
pa, 
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Session Objectives 


e Learn about 
o  Javax-to-Jakarta migration 
o Who, What, When, Where and Why 
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More Sessions Sun, Oct 8 


e Tomcat 11 and Jakarta EE 11 Preview 
o Mark Thomas 
o 12:10 pm 
e Why Apache Tomcat Matters for Jakarta EE 
o Ivar Grimstad 
o 2:20 pm 
e From Spring Boot 2 to Spring Boot 3 with the Help of Apache Tomcat and 


More 
o Ivar Grimstad 
o 4:10 pm 
o Sample code for migrating to Spring 6 / Spring Boot 3: 
https://github.com/ivargrimstad/jakartaee-spring 
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Shawn McKinney 


$ 


Being an aging cyclist is a bit like an old coder. Velocity and endurance 
decline, experience compensates. We choose better lines and make 
fewer mistakes. 


o Works at https://www.symas.com/ 
o ASF member, Directory PMC https://directory.apache.org/ 


o Maintainer Apache Fortress https://directory.apache.org/fortress/ 
e Specializations 

o Application security, LDAP, Ansible 
e Interests 

o Cycling & Open Source https://iamfortress.net/ 

o Bike Monkey https://twitter.com/ABikeMonkey 


Reuse 


For many years now weve had this 
durable base of auxiliary software 
coming from the Java ecosystem. It’s 
free and shields us from the intricacies 
and accelerates development. Makes 
our job easier. 


The Ecosystem 
of Java Platform 


© Upgrade from javax to jakarta — not yet! 


https://iamfortress.net/2022/08/13/upgrade-from-java 
x-to-jakarta-not-yet/ 
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Ecosystem 


TA Shawn McKinney 

ULI ashawnm 

The comparative value of a proposed computing language rests with its 
ecosystem. That's to say without a strong ecosystem, the language is not 
a good candidate for use. Why (what most of us would consider) a bad 
language does well in spite of its caveats. Not calling anyone out. 


Platform 


The programming language itself factors into our choice. Java ranks at or near the 
top, in my estimation. We're not discussing theory or practice here and I’m not 
trying to convince you the platform's viable. 


@ Upgrade from javax to jakarta — not yet! https://iamfortress.net/2022/08/13/upgrade-from-javax-to-jakarta-not-yet/ 
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Cost 


There's a cost associated with using free software, despite the language 
in which it was written. It changes. Always for reasons outside of our 
control. That means we must change our code to accommodate. The 
Jakarta migration requires that millions (billions?) of lines-of-code be 
changed. We're talking about the biggest disruption to the Java 
ecosystem in its 28 years. 


@ Upgrade from javax to jakarta — not yet! https://iamfortress .net/2022/08/13/upgrade-from-javax-to-jakarta-not-yet/ 
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What's the Problem 


O Shawn McKinney 


After many years we in the Java community have enjoyed remarkable 


stability. That being said, raise your hand if you didn't see the javax-to- 
jakarta clusterfuck coming. Don't get me wrong, I'm not laying blame 
(and what good would it do) but can you say line of demarcation? 


Disruption 


The javax to jakarta namespace switch is one ofthe biggest changes into Java of 


the latest 20 years. No doubt. The entire ecosystem is impacted. Not only Java EE 
or Jakarta EE Application servers, but also libraries of any kind (Jackson, CXF, 


Hibernate, Spring to name a few). 


e [From javax to jakarta](https://tomee.apache.org/javax-to-jakarta.html) 
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Specifications 


e Web 
o Servlets 
e Web service 
o JSON, REST, SOAP 
e Enterprise 
o Beans, Messaging, Persistence, Transactions 
e Runtimes 
o Apache Tomcat, Glassfish, JBoss 


Community / Code, Halifax 2023 


Java Enterprise Platform History 


© 
TZEE J. 2 - J. 1 © 
JavaEEK S - ? © 
JAKARTAEE J, ), © 


JDK: '95 - ‘99 

J2EE: ‘99 - ‘03 

JavaEE: ‘03 - ‘19 
JakartaEE: ‘19 - present day 
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Namespace Change 


In Java programs, dependencies are referenced via package names. 


e Package names changed from javax.* to jakarta.“ 


import =D ,n . xml.bind.annotation.XmlAccessType; 


Shawn McKinney 


. 


Java's package naming convention is effective for references in code and 


pulling binary dependencies from the repos. The drawback's found when 
a name changes for a common package, say logging. 


121 


Name Change: Package X —> Y 


Project A uses X + B 

Project B uses X + C 

Project C uses X 

X changes name to Y 

Auses VTB ane ow 

B uses Ÿ +C  warnwe on WA 
C uses Xx Has vor am, 
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Why did the Javax namespace have to change”? 


Java EE was maintained by Oracle under the Java 
Community Process. On September 12, 2017, Oracle 


Corporation announced that it would submit Java EE to the 
Eclipse Foundation. 


e [Jakarta EE](https://en.wikipedia.org/wiki/Jakarta_EE) 
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So what”? 


EN Shawn McKinney 


"I try keep up with the dependents but what worries me are the 
dependencies." 
-- Unknown Github Dev'pr 


What is The Eclipse Foundation”? 


An Independent, Europe-based not-for-profit corporation that acts as a steward of 
the Eclipse open source software development community, with legal jurisdiction 


in the European Union. It is an organization supported by over 350 members, and 
represents the\world's largest sponsoredAollection of Open Source project nd 
developers. The Foundation focuses on key services such as intellectual property 


(IP) management, ecosystem development, and IT infrastructure. 


e [Eclipse Foundation](https://en.wikipedia.org/wiki/Eclipse Foundation) 
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What is Jakarta EE? 


Formerly known as Java Platform, Enterprise Edition (Java EE) and Java 2 
Platform, Enterprise Edition (J2EE), is a set of specifications, extending Java SE 
with specifications for enterprise features such as distributed computing and web 
services. Jakarta EE applications are run on reference runtimes, that can be 
microservices — ei handle transactions, security, 
scalability, concurrency and Manageme e components they are deploying. 


e [Jakarta EE](https://en.wikipedia.org/wiki/Jakarta EE) APACHE TOMCAT 
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D 
a 


Javea JAKARTA Servlet 

Java JAKARTA Server Pages (JSP) 

Enterprise Java JAKARTA Beans (EJB) 

Contexts and Dependency Injection (CDI) 

Java JAKARTA API for Restful Services (JAX-RS) 
Java JAKARTA Architecture for XML Binding (JAXB) 
Websocket 
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The Crux 


Oracle’s Java trademarks are the property of Oracle and the Eclipse Foundation has no rights to use them. The implications of this 
are as follows: 


1. The javax package namespace may be used within Jakarta EE specifications but may be used “as is” only. No modification 
to the javax package namespace is permitted within Jakarta EE component specifications. Jakarta EE specifications that 
continue to use the javax package namespace must remain TCK compatible with the corresponding Java EE specifications. 

2. Jakarta EE component specifications using the javax package namespace may be omitted entirely from future Jakarta EE 
Platform specifications. 

3. Specification names must be changed from a “Java EE” naming convention to a “Jakarta EE” naming convention. This 
includes acronyms such as EJB, JPA or JAX-RS. 


In addition to the above, any specifications which use the javax namespace will continue to carry the certification and container 
requirements which Java EE has had in the past. l.e., implementations which claim compliance with any version of the Jakarta EE 


specifications using the javax namespace must test on and distribute containers which embed certified Java SE implementations 
licensed by Oracle. These restrictions do not apply to Jakarta EE specifications which do not utilize javax, including future revisions 


of the platform specifications which eliminate javax. 
e Update on Jakarta EE Rights to Java Trademarks 


e May 3, 2019 
e https://blogs.eclipse.org/post/mike-milinkovich/update-jakarta-ee-rights-java-trademarks 
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One option facing the Foundation is to simply give up on the negotiations, and 
declare that after 184 months, the relationship with Oracle relating to Jakarta EE is 
dysfunctional and therefore it is not possible to reach agreement. He explained 
that, in the worst case, this would mean Jakarta EE would be terminated. 


e [Eclipse Foundation Board meeting minutes](https:/Awww.eclipse.org/org/foundation/boardminutes/2019 03 26 Minutes.pdf) 
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Why the Namespace Matters 


Non-migrated code doesn’t work with newer container/runtime. 

Older container/runtime doesn’t work with newer (migrated) code. 
There are workarounds. Conversion routines that modify the packaged 
bytecode so it works with the jakarta namespace. Search awn REPLACE 
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How 


Change the source Breaks Backward COMPATIBILITY 
- Change maven coordinates (group ID changed from javax.* to jakarta. *) 
- Modify import statements in code 
- Modify properties prefixed with javax. 
- Upgrade to latest JVM/containers 


Change the binaries WoT A GOOD OPTION FOR LIBS LIKE APACHE FORTRESS CORE 


Eclipse transformer: https://projects.eclipse.org/projects/technology.transformer 

- Tomcat migration tool: https://tomcat.apache.org/download-migration.cgi 

- Intellij Migrating to ‘jakarta’ namespace: 

https://www.jetbrains.com/idea/quide/tutorials/migrating-javax-jakarta/ 

Open Rewrite Jakarta recipes: https://docs.openrewrite.org/recipes/java/migrate/jakarta 
- Both OK Fór apes 

- Modify project source 

- Modify binaries of non-migrated dependencies 
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MAVEN 


Change the Source S 


<dependency> 


<groupld>javax.xml.bind</groupld> 


<artifactid>jaxb-api</artifactid> 


<version>$S{version.jaxb.api}</version> 


</dependency> 
To: 


<dependency> 


<groupid>jakarta.xml.bind</groupId> 


<artifactId>jakarta.xml.bind-api</artifactId> 
<version>${version.jaxb.api}</version> 


</dependency> Community / Code, Halifax 2023 


Change the Source pacxace Impoers 


src/main/java/org/apache/directory/fortress/core/model/AuthZ. java 


ge org.apache.directory.fortress.core.model; 


rt javax.xml.bind.annotation.XmlAccessType; 
rt javax.xml.bind.annotation.XmlAccessorType; 
t javax.xml.bind.annotation.XmlRootElement; 
javax.xml.bind.annotation.XmlType; 
ort jakarta.xml.bind.annotation.XmlAccessType; 
ort jakarta.xml.bind.annotation.XmlAccessorType; 
't jakarta.xml.bind.annotation.XmlRootElement; 
rt jakarta.xml.bind.annotation.XmlType; 


Apache Fortress 


OpenLDAP Any LDAP 


Subproject of Apache Directory 
Written in Java 
Role-Based Access Control 


Four Components 
o Core: Java APIS JAKB 
o Realm: Java EE security 
o Web: Administrative Ul SERVLET 
o Rest: APIS/HTTP J- 
[Apache Fortress](https://directory.apache.org/fortress/) 


Any 
Java App 


Any App using Rest 
or JSON 


Browser 
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Three Tries 


Stale branches 


Consequences ALL OR NOTHING 


Every API must transition the Java package name from javax to jakarta. 
New versions of app servers must be released. The new impls won't work on 
Java EE-based app servers and the old impls won't work on Jakarta 
FE-based app servers. 

e Jakarta EE 8 APIs do not work with Jakarta EE 9 impls and vice versa. 


e [Understanding Jakarta EE 9](https://www.eclipse.org/community/eclipse_newsletter/2020/november/1.php) 
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Strike One 


@ à Shawn McKinney 


Spent a w/e being battered by an ill-fated javax-to-jakarta conversion of 
jaxb libs. There were false starts / upgrades. There were hard resets and 
reverts. | even had to consult stack overflow posts. In the end, a full 
retreat. You may have won this time jaxb, but I'll be back. 


Reflection 


O Shawn McKinney 


How about this one? (asking for a friend) 


Jax be impl, 
Jax be quick, 


Jax be dumping out a fricken stacktrace during my Javax-to-Jakarta 
migration 


Acceptance 


Shawn McKinney € 

Failed to execute goal org.apache.maven.plugins:maven-compiler- 
plugin:3.10.1:compile (default-compile) on project fortress-rest: Fatal error 
compiling: CompilerException: NullPointerException -> [Help 1] 

[ERROR] 


Shawn McKinney 


When a stax's in the middle where the maven ravens prattle 
with your jars in the middle of a module-eating caboodle, 
THIS is what they call... 

... a jakartled javaxed fuddled muddled stax are fucked, sir! 


Shawn McKinney 
Those familiar w/ javax -> jarkarta migrations might find a glimpse of 
humor. Otherwise, please refer to Dr. Seuss. 


Strike Two 
O Shawn McKinney 


Written after a second scuttled[1] attempt to migrate a IA library to 
Jakarta. (Not a rant post) 

iamfortress.net/2022/08/13/upg... 

[1]transitive verb 

: to cut a hole through the bottom, deck, or side of (a ship) 
specifically : to sink or attempt to sink by making holes through the 
bottom 


Upgrade from javax to jakarta — not yet! 


Update 


April 24, 2023 


Many of the suppliers are getting their migrated packages released. For example, 
Spring 6, Apache CXF 4 and Apache Wicket 10. 


A à Shawn McKinney 

0 

Just got a successful test using Jakarta (instead of Java w/ Apache 
Tomcat 10, Apache Fortress 2.0.9, Apache CXF 4 and Spring 6! Started 
this epic journey about 2 years ago. 


186 


Third time’s the charm 


O Shawn McKinney 


The logjam has busted up. Apache Fortress now migrates to Jakarta. So 
long Javax. You served us well and your time has passed. 


@) Apache Fortress 


Can you say Jakarta compatible? Just in time for our 3.0 release! 
twitter.com/apache wicket/... 


127 


Logjam 


The runtime’s ready, with a logjam in the projects upstream. Can't migrate until all 
dependencies have published compatible packages. In turn dependent projects 
must wait until we publish our conversion, and so on. We can replace 
non-compliant libraries (a ton of work) or wait. 


© Upgrade from javax to jakarta — not yet! https://iamfortress.net/2022/08/13/upgrade-from-javax-to-jakarta-not-yet/ 


More Info 


e Migrating from javax to jakarta namespace 


https://youtu.be/mukr2Q_zBm4?si=JQmJvsZQHH-V5zpH 


e Transition from Java EE to Jakarta EE 


https://blogs.oracle.com/javamagazine/post/transition-from-java-ee-to-jakarta-ee 
e From javax to jakarta namespace https://tomee.apache.org/javax-to-jakarta.html 
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NOT À RANT 


That has all been covered elsewhere. | will point out that converting the code is 
simple. Just change the package imports and pull in the newer versions of the libs 
into whatever dependency mechanism is being used. 


If you can find all of them. As of today, many affected suppliers have published 
Jakarta compatible releases, some are still working on it, while still others have it 
on their roadmap. 


That’s quite remarkable actually and demonstrates the robustness of the 


ecosystem. It'll handle it — eventually. 
e [Upgrade from javax to jakarta — not yet!](https://iamfortress net/2022/08/13/upgrade-from-javax-to-jakarta-not-yet/) 
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Parting thoughts 


e We (the ecosystem) aren't going away 
e Jakarta’s in good hands 
e Here's to 20 more years of stability 


Contact 


Shawn McKinney 
Email: smckinney@apache.org 


Twitter: @shawnmckinney 
Blog: https://www.symas.com/symas-blo 
Project: https://directory.apache.org/fortress/ 


